NX-OS BGP AD Manipulation

Dieg0M

I'm trying to change the admin distance of a single BGP peer received prefixes on NX-OS. The backdoor command does not work on NX-OS and the distance command changes AD globally for the whole address-family process. Was thinking maybe using vrf in the address-family but it doesnt look like BGP supports vrf. Any ideas?

networker050184

I guess the end goal is to have IGP routes preferred and the BGP route as a backup? Not sure if there is anyway to do exactly what you are asking, but is there a way to get some more specifics into the IGP and possibly a backup aggregate via BGP as a work around?

Dieg0M

The IGP is injecting non contiguous Public IP's so it will be pretty tricky to have an aggregate not encompass another AS and blackhole some traffic. The only solution I can think of right now is to lower those prefixes in the IGP since I cant increase them in BGP.

**EDIT:
The solution of lowering the AD of those prefixes in the IGP does not work either. Distance command in NX-OS is global only for IGP's also..

Roy4USA

Perhaps try changing those prefixes with Policy Based Routing?
Cisco Nexus 7000 Series NX-OS Unicast Routing Configuration Guide, Release 6.x - Configuring Advanced BGP [Cisco Nexus 7000 Series Switches] - Cisco

Dieg0M

I did not know you could change AD with PBR in NX-OS. I will try it on a spare Nexus switch tomorrow. Thank you!


Edit: ** I tried but it looks like it's only supported on nexus 7k. I am using nexus 3k so limited features as this is a LLC switch.